CVE-2022-49324
mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 02:10 AM UTC
Updated: June 17, 2026 at 05:17 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mips_cpc_default_phys_base Add the missing of_node_put() to release the refcount incremented by of_find_compatible_node().
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≥ 4.15.10v < 4.14.2834.14.27 ≤ v < 4.14.2834.15 ≤ v < 4.19.2474.15.10 ≤ v < 4.164.16 ≤ v < 4.19.2474.16 ≤ v < 5.10.1224.16 ≤ v < 5.15.474.16 ≤ v < 5.17.154.16 ≤ v < 5.18.44.16 ≤ v < 5.194.16 ≤ v < 5.4.1984.20 ≤ v < 5.4.1985.11 ≤ v < 5.15.475.16 ≤ v < 5.17.155.18 ≤ v < 5.18.45.5 ≤ v < 5.10.1224.14.274.15.104.16791412dafbbfd860e78983d45cf71db603a82f677a676d14cc093c19c07d213a0ddc7f5c47154aaedc2f0da8350e413923ad67e2e26d8d9f1fb97aff
Vendor states this is fixed in 1699ec1bfb59304a788901474f6bb003f7831b61 (fixed)
Vendor states this is fixed in 4107fa700f314592850e2c64608f6ede4c077476 (fixed)
Vendor states this is fixed in 8f843cdfc202caaa5d67db3395d893e56362e43a (fixed)
Vendor states this is fixed in 961ee8a6eeef4632a215d995d837b204f8c7c2d4 (fixed)
Vendor states this is fixed in aae6b4bb63c694bc91714412718f15468407fe51 (fixed)
Vendor states this is fixed in bed702566dcdb6ebe300bc0c62bf3600cf4d5874 (fixed)
Vendor states this is fixed in c667b3872a4c435a3f29d4e15971cd8c378b0043 (fixed)
Vendor states this is fixed in cc0aed22d33ced9e266c50bdf1cbe668c5acfdf8 (fixed)
Vendor states this is fixed in 4.14.283 (unaffected)
Vendor states this is fixed in 4.16 (unaffected)
Vendor states this is fixed in 4.19.247 (unaffected)
Vendor states this is fixed in 5.10.122 (unaffected)
Vendor states this is fixed in 5.15.47 (unaffected)
Vendor states this is fixed in 5.17.15 (unaffected)
Vendor states this is fixed in 5.18.4 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.4.198 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/1699ec1bfb59304a788901474f6bb003f7831b61
- https://git.kernel.org/stable/c/4107fa700f314592850e2c64608f6ede4c077476
- https://git.kernel.org/stable/c/8f843cdfc202caaa5d67db3395d893e56362e43a
- https://git.kernel.org/stable/c/961ee8a6eeef4632a215d995d837b204f8c7c2d4
- https://git.kernel.org/stable/c/aae6b4bb63c694bc91714412718f15468407fe51
References (8)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1699ec1bfb59304a788901474f6bb003f7831b61Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4107fa700f314592850e2c64608f6ede4c077476Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8f843cdfc202caaa5d67db3395d893e56362e43aPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/961ee8a6eeef4632a215d995d837b204f8c7c2d4Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/aae6b4bb63c694bc91714412718f15468407fe51Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bed702566dcdb6ebe300bc0c62bf3600cf4d5874Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c667b3872a4c435a3f29d4e15971cd8c378b0043Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/cc0aed22d33ced9e266c50bdf1cbe668c5acfdf8SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
5.5MEDIUMCISA-ADP
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card